Some tasks are always run even if they are not needed

[romaincabassot]

Hello,

It's not a major problem but it's usefull to really know what is changed when we execute a playbook and those task always return a 'changed' state:

TASK [dev-sec.ssh-hardening : check and compile policy] ************************
changed: [server]

TASK [dev-sec.ssh-hardening : create selinux policy module package] ************
changed: [server]

TASK [dev-sec.ssh-hardening : install selinux policy] **************************
changed: [server]

It would be nice if they weren't executed if don't needed or don't produce a changed state if not necessary.

Romain

[rndmh3ro]

Hi Romain,

yes, you're right and I already coded it here:
https://github.com/dev-sec/ansible-ssh-hardening/tree/check_selinux_module

I still have to create a PR, though.